This protects against an application that uses netcf and may exec a
program without explicitly closing all open file descriptors in the
child process.
---
src/dutil.c | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
diff --git a/src/dutil.c b/src/dutil.c
index dbb43ef..2a6eaa0 100644
--- a/src/dutil.c
+++ b/src/dutil.c
@@ -519,6 +519,9 @@ int netlink_init(struct netcf *ncf) {
}
nl_cache_mngt_provide(ncf->driver->addr_cache);
+ int netlink_fd = nl_socket_get_fd(ncf->driver->nl_sock);
+ if (netlink_fd >= 0)
+ fcntl(netlink_fd, F_SETFD, FD_CLOEXEC);
return 0;
error:
--
1.6.6.1
Show replies by date